Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
File:                     1-W34zO69n2Z67SBBIIP2FlRWr8c.cer (raw, json)
Hash identifier:          mAm3x2nBF4x9U89t766ZCWnDIuvT0A8WiUBkdH5Sd8M=
Subject key identifier:   F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18EE11633418B89D465424BA1665ABB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:28:03 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 37.18.136.0/21
                          IP: 46.31.200.0/21
                          IP: 185.48.76.0/22
                          IP: 2a04:b240::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:ee:11:63:34:18:b8:9d:46:54:24:ba:16:65:ab:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:28:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f96df8cceebd9f667aed20412083f6165456afc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:75:df:61:fa:4a:73:15:3d:d0:10:c0:37:21:
                    74:ed:cf:46:c6:05:d1:d8:68:4d:51:f6:f9:38:eb:
                    dc:74:1a:d6:43:af:ab:35:b6:d5:b9:fe:29:57:aa:
                    74:68:0a:08:84:bc:8f:10:32:03:a2:c4:b1:60:94:
                    77:01:be:fd:7a:b2:df:79:6b:36:31:54:48:53:8d:
                    34:97:4c:1b:fd:0a:1c:b4:f8:50:f7:db:b6:a1:09:
                    9e:9d:6e:b8:f3:fc:ce:27:a2:40:22:ba:40:ba:97:
                    14:b0:6a:da:c8:3c:55:89:97:51:f9:85:a1:e0:5f:
                    51:60:d1:bf:d3:6e:a9:8e:97:e7:b7:66:d4:41:c6:
                    ec:89:3e:4f:e6:05:2e:b5:bc:6f:cf:ec:8c:39:ea:
                    e1:0a:c2:de:cb:93:84:89:e8:14:8f:21:9b:5c:7d:
                    59:34:85:95:78:5e:48:7e:c1:e1:ee:55:32:ba:e2:
                    e7:e8:a6:ff:32:0c:bc:1a:33:b7:e3:4f:e3:87:60:
                    72:d9:7f:1e:32:3e:6f:92:17:58:96:72:7a:84:94:
                    33:d1:48:1e:4d:1f:d4:ff:53:00:af:69:28:cd:f8:
                    75:58:32:0b:2a:55:e0:0e:d1:55:14:74:c7:5b:da:
                    c0:7f:cb:d7:dc:89:09:b7:fc:07:91:c4:0f:91:5d:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.136.0/21
                  46.31.200.0/21
                  185.48.76.0/22
                IPv6:
                  2a04:b240::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:cf:45:92:97:1e:54:8c:12:d2:8e:ea:fe:fe:33:96:cb:
         6b:7d:c7:4d:75:75:35:59:24:78:92:ca:ad:c0:23:6f:5b:08:
         3f:68:d0:10:d1:20:db:03:b9:fe:d1:0c:32:b3:24:fb:7a:33:
         35:83:71:61:e2:21:78:d8:79:13:8b:e5:cb:45:92:22:31:78:
         c5:42:70:2b:37:be:c5:9b:57:33:34:de:54:91:5f:89:67:c0:
         ca:e9:8a:70:74:b5:43:d6:b3:0f:0d:ae:6b:df:92:e9:08:72:
         68:cd:ef:bf:66:2b:8f:68:52:53:92:f7:2e:7f:42:9b:72:00:
         4b:15:27:9d:b4:33:6e:62:cf:e6:b3:d0:06:27:c7:63:f1:25:
         c6:97:8e:e1:57:81:01:54:26:f2:7b:7b:fe:fd:38:0f:4c:64:
         b3:4c:b2:2c:77:0f:9a:02:ed:7e:52:99:03:9a:64:7e:6c:36:
         2d:2f:d6:5e:dc:9a:a1:ce:69:aa:6b:cc:27:10:ff:b5:1d:c8:
         39:5b:b9:cc:80:0a:f4:3f:a6:a9:26:fe:61:7d:e9:7e:17:cf:
         7e:61:4d:66:cf:8a:3a:3e:3e:e9:7d:91:67:f4:f0:0f:96:b6:
         66:bd:b3:14:7f:b9:06:ce:57:48:de:83:3b:8a:58:56:c3:bf:
         7c:d9:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:31 2026 by rpki-client